This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json) Hash identifier: vpUkgzdSccahshb7XBjDouA0+w6HmURl1+6VHFb4caI= Subject key identifier: 9D:22:E7:79:28:C5:06:E7:9D:9D:32:CF:19:E6:60:72:88:4A:1B:CF Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9 Certificate serial: 019B52613707C026B453C4F5788911C593AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:01:01 +0000 Manifest this update: Wed 24 Dec 2025 22:01:01 +0000 Manifest next update: Thu 25 Dec 2025 22:01:01 +0000 Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=) 2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=) 3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: vM+ssglSMW+VAlRonfqh5OlvOu1yTojkJX0c3lqHMSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:37:07:c0:26:b4:53:c4:f5:78:89:11:c5:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9 Validity Not Before: Dec 24 22:01:01 2025 GMT Not After : Dec 25 22:01:01 2025 GMT Subject: CN=9d22e77928c506e79d9d32cf19e66072884a1bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:80:42:ae:13:5d:af:8a:38:87:62:19:90: 5e:84:43:67:22:73:2b:c6:3a:f5:62:18:ea:c7:ac: 36:c9:5d:f6:9a:08:df:0f:f2:2b:69:4e:5d:7f:3d: da:33:6d:23:e3:5c:f4:c1:18:42:ee:96:70:0c:ca: 15:7a:24:ac:fb:00:ff:be:bf:26:17:bc:ae:80:f7: 81:71:57:7b:8a:74:46:34:61:fc:68:32:83:58:09: b6:9a:d2:c7:4c:3a:48:65:18:a6:75:96:a3:b6:c7: 4b:0b:1d:89:6d:7b:69:4c:9e:74:2d:d7:d0:89:38: 7d:b8:b8:05:a0:a2:29:c5:aa:41:e6:2b:44:14:82: e6:1e:18:ea:5a:34:35:8d:64:d4:48:6c:4d:a0:78: 34:c4:f5:c7:8b:67:8c:a0:3d:84:fe:88:a6:28:9d: 2b:3c:bd:fb:41:4b:82:d5:2a:1b:68:85:75:ec:1b: 3d:bf:b2:6b:35:b8:9a:d9:50:7a:0f:31:24:9f:ee: 3c:ee:c4:bb:33:a4:fc:f4:d4:91:07:89:85:e3:0d: b9:52:42:28:2d:f9:2d:74:7c:41:8b:1e:dc:54:ad: 57:be:36:79:5c:cb:b0:20:13:ab:28:d9:0f:85:77: 8b:1e:6d:21:59:34:c6:42:6b:da:91:25:92:8f:46: 85:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:22:E7:79:28:C5:06:E7:9D:9D:32:CF:19:E6:60:72:88:4A:1B:CF X509v3 Authority Key Identifier: keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e1:a9:3d:3c:81:7c:97:34:76:b6:16:6b:3b:1f:a8:03:49: 67:c0:1a:b1:bc:b1:94:76:0a:0f:75:7b:e5:56:be:f6:d0:72: ad:fe:e3:13:8d:b1:cb:69:6a:a3:9d:c7:65:b4:6b:84:b9:37: f0:5f:05:dd:13:4e:92:59:28:00:c3:7e:87:67:09:1e:db:cd: 65:2c:cd:fc:73:5a:5e:ff:cd:f2:5a:8f:73:bc:21:9a:4d:59: 9b:07:0b:fb:0a:26:65:ed:77:a2:75:29:8f:3e:d2:40:84:f4: 80:ce:cf:a9:8f:98:42:c4:f8:01:fd:1f:57:30:be:89:b0:da: e6:e1:ef:ff:fb:bd:f3:87:09:6d:91:39:c5:4f:6f:62:18:9a: 78:a9:9f:39:a9:12:f5:fc:ba:23:22:8c:93:fc:3f:6e:a9:68: f3:9f:7d:d2:68:0b:58:d0:cc:32:58:a1:d6:47:ab:aa:66:c1: 5b:48:d7:71:29:bd:e3:7b:21:86:b2:f9:49:df:d9:e7:a9:20: ef:1f:66:f6:b4:a6:5c:21:13:89:61:c3:5b:c5:c5:3c:3b:cf: e3:cb:dc:ed:07:aa:a8:62:6f:ec:55:8c:9a:3a:89:2c:d6:e8: bd:0a:6e:4b:d2:a0:ef:70:bb:02:a1:88:ae:11:d7:b5:c8:00: b8:5b:c1:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYTcHwCa0U8T1eIkRxZOrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1N2YyOTE4MThkODcxOTczODI2OGQ4NDQ5OTRhMmUxMDgy NGQ0YzkwHhcNMjUxMjI0MjIwMTAxWhcNMjUxMjI1MjIwMTAxWjAzMTEwLwYDVQQD Eyg5ZDIyZTc3OTI4YzUwNmU3OWQ5ZDMyY2YxOWU2NjA3Mjg4NGExYmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CqAQq4TXa+KOIdiGZBehENnInMr xjr1Yhjqx6w2yV32mgjfD/IraU5dfz3aM20j41z0wRhC7pZwDMoVeiSs+wD/vr8m F7yugPeBcVd7inRGNGH8aDKDWAm2mtLHTDpIZRimdZajtsdLCx2JbXtpTJ50LdfQ iTh9uLgFoKIpxapB5itEFILmHhjqWjQ1jWTUSGxNoHg0xPXHi2eMoD2E/oimKJ0r PL37QUuC1SobaIV17Bs9v7JrNbia2VB6DzEkn+487sS7M6T89NSRB4mF4w25UkIo LfktdHxBix7cVK1XvjZ5XMuwIBOrKNkPhXeLHm0hWTTGQmvakSWSj0aFywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0i53koxQbnnZ0yzxnmYHKIShvPMB8GA1UdIwQY MBaAFKV/KRgY2HGXOCaNhEmUouEIJNTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAt YjFhOTc5M2VlMzI0LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NjNhODMtZDJkMS00NjRjLWJkYjAtYjFhOTc5M2VlMzI0 LzEvcFg4cEdCalljWmM0Sm8yRVNaU2k0UWdrMU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuGpPTyB fJc0drYWazsfqANJZ8AasbyxlHYKD3V75Va+9tByrf7jE42xy2lqo53HZbRrhLk3 8F8F3RNOklkoAMN+h2cJHtvNZSzN/HNaXv/N8lqPc7whmk1ZmwcL+womZe13onUp jz7SQIT0gM7PqY+YQsT4Af0fVzC+ibDa5uHv//u984cJbZE5xU9vYhiaeKmfOakS 9fy6IyKMk/w/bqlo85990mgLWNDMMlih1kerqmbBW0jXcSm943shhrL5Sd/Z56kg 7x9m9rSmXCETiWHDW8XFPDvP48vc7QeqqGJv7FWMmjqJLNbovQpuS9Kg73C7AqGI rhHXtcgAuFvBYA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:13:53 2025 by rpki-client